VACL on 6500 not block packet to control plane

[Oleg Volkov]

Hello!

I have Sup2T with 12.2(50r)SYS3 IOS.

Why VACL

(sh vlan filter vlan 2
Vlan 2 has filter MANAGEMENT_VACL2.
filter is active)

Works as expected except one situation:
I can not ping any devices in VLAN 2 from denyed net, except SVI VLAN2.
I think VACL filter do not applyed to control plane. It is true?
And what I can modyfy filter to block packet from denyed network to VLAN2 SVI too?
Thank You

[gs.skills]

Hello,
SVI is a Layer 3 interface, i guess if the traffic do not flow throw the vlan (routed traffic), it cannot be filtered with a vlan accesp-map
My solution:
Apply an ACL on the vlan SVI: ip access group ... in